Known vulnerabilities in Easy Digital Downloads

Software CPE: cpe:2.3:a:mordauk:easy-digital-downloads:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Easy Digital Downloads Easy Digital Downloads is affected by 7 known vulnerabilities: 1 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71178 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-23489
CWE-89 High
No
No
3.1.0.4 16.01.2023 SB2023011614
#VU70137 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-3600
CWE-94 Medium
No
No
3.1.0.2 13.12.2022 SB2022121374
#VU58018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-39354
CWE-79 Low
No
No
2.11.2.1 09.11.2021 SB2021110905
#VU57433 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.11.2.1 19.10.2021 SB2021101911
#VU52950 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.10.4 06.05.2021 SB2021050633
#VU52313 - Business Logic Errors (3.0)
CWE-840 Low
No
No
2.10.3 19.04.2021 SB2021041902
#VU18863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.9.16 21.06.2019 SB2019061211